It isn't really a problem. Attacker would probably not run it on their own computer but some other compromised computers instead. It also doesn't have to be full NFS server but only the minimal functionality to deliver single file.